OpenWhistle vs Report Securely

OpenWhistle is open-source software for organisations that need an internal whistleblowing channel under EU Directive 2019/1937 and Germany’s HinSchG. It runs on the organisation’s own server through Docker Compose or a Helm chart; the project does not offer hosted service. Reporters can submit information without an account or email address and receive a case number and UUID4 PIN to return to the status page, read replies, and send messages. In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason. Admin sign-in supports a password, LDAP, or OIDC, and requires TOTP. The maker says it does not store IP addresses and outbound requests are opt-in and off by default. Closed reports are deleted after 1,095 days by default. The interface supports English, German, French, and Brazilian Portuguese. It is free under GNU GPL v3.0, with no paid tier; the organisation provides its own server.

Report Securely has no write-up on Specifiction yet; its figures are above.